This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft File: 28E2707085C2950AF9267465A3801841D8077215.mft (raw, json) Hash identifier: Djco6W9zdwMBQpwgqlUgC4WWHFBMrJiCWFmH6tJAR8s= Subject key identifier: B4:8D:34:96:5D:E6:ED:4A:35:3C:2B:88:F5:2E:C1:67:C4:17:A3:77 Authority key identifier: 28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15 Certificate issuer: /CN=28E2707085C2950AF9267465A3801841D8077215 Certificate serial: 491E972EBC3339FFD2236D759F3D5CCA54486299 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft Manifest number: 0214 Signing time: Sun 25 Jan 2026 13:41:08 +0000 Manifest this update: Sun 25 Jan 2026 13:36:08 +0000 Manifest next update: Wed 28 Jan 2026 23:05:08 +0000 Files and hashes: 1: 3130332e3138342e36362e302f32332d3234203d3e20313439363730.roa (hash: NmvwQ+vJpzvl8csZBAxbb4I15urZPoz8PAj6HkV5eq8=) 2: 28E2707085C2950AF9267465A3801841D8077215.crl (hash: TEbdkXE/Tu9J+5T15Nv+tFwj6GXHZJ5HUtdWbL7c6+I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:1e:97:2e:bc:33:39:ff:d2:23:6d:75:9f:3d:5c:ca:54:48:62:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28E2707085C2950AF9267465A3801841D8077215 Validity Not Before: Jan 25 13:36:08 2026 GMT Not After : Jan 28 23:05:08 2026 GMT Subject: CN=B48D34965DE6ED4A353C2B88F52EC167C417A377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:91:a2:a0:bc:7e:7e:8b:6b:e7:43:bd:1a:25: a3:3a:f7:ca:61:ba:69:ca:f8:6b:51:1a:1e:fc:c2: 9c:99:1e:1d:03:0a:62:44:26:24:e3:63:c7:06:c0: 61:a9:f6:03:4f:30:27:ac:22:da:38:05:55:4e:63: 0b:4d:28:31:7a:de:70:89:7c:f5:9c:e7:eb:52:89: aa:e4:36:6e:d9:23:db:9b:01:cf:6e:52:cd:55:7e: 2e:18:2a:fc:18:45:17:66:26:d6:41:09:b3:c6:63: 46:65:9d:78:98:f7:56:b7:e4:a4:57:44:4c:16:54: 81:3f:e7:88:ed:4e:fe:99:f3:9c:97:86:e3:61:3e: d5:a9:db:fd:d2:9e:25:88:ee:8c:7e:41:2b:56:44: 28:65:ed:91:5b:fd:58:db:a8:bb:bf:71:93:5a:fa: c2:d7:8d:e2:53:f8:30:f9:5d:a1:20:b4:21:2b:26: a1:51:04:d8:91:ee:88:92:48:f7:0f:b4:37:57:36: 5c:8a:4a:9a:98:45:26:0c:9c:43:e5:d0:56:9b:f0: b6:c5:ed:6c:4f:dc:72:88:e5:f3:c8:ef:ff:59:60: f6:15:52:db:de:f7:11:24:29:62:6e:2b:57:84:d9: 4b:43:25:de:74:a5:78:05:1d:cc:5e:ac:ce:32:d3: 14:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:8D:34:96:5D:E6:ED:4A:35:3C:2B:88:F5:2E:C1:67:C4:17:A3:77 X509v3 Authority Key Identifier: keyid:28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:8c:16:47:14:1e:28:21:de:e4:c2:0b:c7:b9:ec:67:17:af: 8e:ac:60:f3:b1:90:a3:ce:30:ef:66:fe:e7:63:b3:9e:15:90: 7a:18:0d:e5:5e:44:8a:00:82:36:6f:63:bd:ea:dc:d5:6e:2a: c0:6e:a7:76:50:27:9f:b7:70:01:4c:5a:02:62:c0:24:8f:6e: 65:3e:d0:9d:26:39:ce:84:26:3b:ae:6f:20:6d:17:a6:38:88: 59:09:55:79:07:4e:51:f4:c8:94:59:13:e7:1d:72:50:e4:6b: aa:06:f6:16:9f:24:5a:8c:a2:9d:09:6b:79:cd:9e:6f:d8:80: 57:ff:a8:ba:a7:b7:f5:eb:e1:d7:6c:b0:eb:bd:b3:9a:b1:62: 2a:7a:20:8f:72:46:7c:06:c6:8b:aa:14:2b:1f:18:9c:7f:c7: 85:2e:d2:7a:2b:18:6e:19:32:61:cf:3c:d7:7f:67:60:93:d0: 9a:87:19:5e:6e:ee:64:2c:34:d1:97:9c:a3:83:2d:63:08:0c: 9b:93:a2:e8:50:62:f0:c8:fa:6f:00:3a:00:12:c4:d7:1e:d4: 0d:e6:d6:f7:af:59:d2:78:ec:74:14:cf:ed:bd:83:b7:67:3b: 44:75:c7:28:58:4f:61:59:88:39:d9:b4:22:30:78:0e:99:23: 23:fd:1e:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSR6XLrwzOf/SI211nz1cylRIYpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4NDFE ODA3NzIxNTAeFw0yNjAxMjUxMzM2MDhaFw0yNjAxMjgyMzA1MDhaMDMxMTAvBgNV BAMTKEI0OEQzNDk2NURFNkVENEEzNTNDMkI4OEY1MkVDMTY3QzQxN0EzNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPkaKgvH5+i2vnQ70aJaM698ph umnK+GtRGh78wpyZHh0DCmJEJiTjY8cGwGGp9gNPMCesIto4BVVOYwtNKDF63nCJ fPWc5+tSiarkNm7ZI9ubAc9uUs1Vfi4YKvwYRRdmJtZBCbPGY0ZlnXiY91a35KRX REwWVIE/54jtTv6Z85yXhuNhPtWp2/3SniWI7ox+QStWRChl7ZFb/VjbqLu/cZNa +sLXjeJT+DD5XaEgtCErJqFRBNiR7oiSSPcPtDdXNlyKSpqYRSYMnEPl0Fab8LbF 7WxP3HKI5fPI7/9ZYPYVUtve9xEkKWJuK1eE2UtDJd50pXgFHcxerM4y0xRLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtI00ll3m7Uo1PCuI9S7BZ8QXo3cwHwYDVR0j BBgwFoAUKOJwcIXClQr5JnRlo4AYQdgHchUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDQ2OWVlOS04MTRlLTQ1N2EtYmIxMy1hNWM0YjZmMWI1YWYvMC8yOEUyNzA3MDg1 QzI5NTBBRjkyNjc0NjVBMzgwMTg0MUQ4MDc3MjE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4NDFEODA3 NzIxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ0NjllZTktODE0ZS00NTdhLWJi MTMtYTVjNGI2ZjFiNWFmLzAvMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4 NDFEODA3NzIxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKWMFkcUHigh3uTCC8e57GcXr46sYPOxkKPO MO9m/udjs54VkHoYDeVeRIoAgjZvY73q3NVuKsBup3ZQJ5+3cAFMWgJiwCSPbmU+ 0J0mOc6EJjuubyBtF6Y4iFkJVXkHTlH0yJRZE+cdclDka6oG9hafJFqMop0Ja3nN nm/YgFf/qLqnt/Xr4ddssOu9s5qxYip6II9yRnwGxouqFCsfGJx/x4Uu0norGG4Z MmHPPNd/Z2CT0JqHGV5u7mQsNNGXnKODLWMIDJuTouhQYvDI+m8AOgASxNce1A3m 1vevWdJ47HQUz+29g7dnO0R1xyhYT2FZiDnZtCIweA6ZIyP9HiY= -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:51 2026 by rpki-client